Sean McLinden
Sean McLinden
I'm getting the same error, Ubuntu 18.04 LTS. Try downloading rvm for your OS version (rvm.io). Install it, then run "rvm install ruby-2.5.0" and then "rvm use 2.5.0". You'll, likely,...
Could someone share configuration settings in FAME to work with Cuckoo? I was getting timeout errors and I changed the tcp_keepalive settings which appeared to have helped (no longer getting...
The Cuckoo analysis completes. I can see it in the Cuckoo dashboard. Here is a copy of the relevent logs. Note that about an hour of processing occurs before the...
I may try forking a change to the module which would download the report and then parse it, locally. There seem to be two issues. In one case, Cuckoo seems...
I would love the ability to re-run an analysis. When testing things like the interface to Cuckoo, it would be nice if it were easier to resubmit an existing file/url...
Thanks. I love writing parsers so I'll have fun taking a crack at it.
Ok, so as an exemplar, I used this: https://www.us-cert.gov/ncas/alerts/TA18-201A The end of the document contains both registry entries and pathnames, yet none of the pathnames are extracted as observables. I...
The text is registered down to and including the DIV containing the file paths. Images are not included and neither are the headings (H3). The text following the DIV reference,...
So, help me to understand. Does Yeti convert HTML to Markdown, before processing it for observables? I could read through the code to get the answer but knowing the answer...
The reason that I ask is that the Markdown for the relevant sections of the page in question is: **Example Filenames and Paths:** `C:\Users\\AppData \Local\Microsoft\Windows\shedaudio.exe` `C:\Users\\AppData\Roaming\Macromedia\Flash Player\macromedia\bin\flashplayer.exe` **Typical Registry Keys:**...